Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Configures the default authentication methods.switch(config)# aaa
authentication login default
Step 2
The group-list argument consists of a space-delimited list of
group names. The group names are the following:
{group group-list [none] | local
| none}
• radius —Uses the global pool of RADIUS servers for
authentication.
•
named-group —Uses a named subset of TACACS+ or
RADIUS servers for authentication.
The local method uses the local database for authentication.
The none method uses the username only.
The default login method is local , which is used when no
methods are configured or when all of the configured methods
do not respond.
Exits configuration mode.switch(config)# exit
Step 3
(Optional)
Displays the configuration of the default login authentication
methods.
switch# show aaa authentication
Step 4
(Optional)
Copies the running configuration to the startup configuration.
switch# copy running-config
startup-config
Step 5
Enabling Login Authentication Failure Messages
When you log in, the login is processed by the local user database if the remote AAA servers do not respond.
If you have enabled the displaying of login failure messages, the following message is displayed :
Remote AAA servers unreachable; local authentication done.
Remote AAA servers unreachable; local authentication failed.
To enable login authentication failure messages, perform this task:
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Enables login authentication failure messages.
The default is disabled.
switch(config)# aaa authentication login
error-enable
Step 2
Exits configuration mode.switch(config)# exit
Step 3
(Optional)
Displays the login failure message configuration.
switch# show aaa authentication
Step 4
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
234 OL-16597-01
Configuring AAA
Enabling Login Authentication Failure Messages